PT-2007-5769 · Eyeos · Eyeos

Andrej Komarov · Published 2007-08-31 · Updated 2018-10-15 · CVE-2007-4609

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions eyeOS (affected versions not specified)

Description The issue concerns the use of predictable checksum values in the checknum parameter for access control. This allows remote attackers to register multiple accounts via doCreateUser actions, add multiple eyeBoard messages via addMsg actions, and potentially cause a denial of service or conduct unauthorized activities by guessing valid parameter values.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2007-4609

Affected Products

Eyeos

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2007-4609 · Security Note
• http://osvdb.org/45836 · Note
• http://securityreason.com/securityalert/3081 · Note
• http://securityfocus.com/archive/1/477866/100/0/threaded · Note